Ben Goldacre talks about how physicians are only getting data on tests that come out positive:

I look forward to the day when infosec standards are set based on some tests or evidence, and we have to fight to extract more data.

The talk is here: here.